Blog Section
A corrective release of X.Org Server 21.1.4 is available, which addresses two vulnerabilities in the Xkb extension handlers that allow privilege escalation in the system if the X server is running with root privileges, or executing code on a remote system if session redirection via X11 is used over SSH. The vulnerabilities are caused by a lack of proper size checking in the ProcXkbSetGeometry request handlers (CVE-2022-2319) and […]
A set of patches has been proposed for inclusion in the Linux kernel, featuring an optimized implementation of the memchr() function, which is used for searching for a character in an array. Unlike the older version that relied on byte-by-byte comparison, the proposed implementation is designed to fully utilize 64-bit and 32-bit CPU registers. Instead of bytes, comparisons are conducted using machine words, allowing multiple comparisons at once […]
After a year of development, the release of Live Distribution NST 36 (Network Security Toolkit) has been published, aimed at conducting network security analysis and monitoring its performance. The size of the bootable ISO image (x86_64) is 4.1 GB. A special repository has been prepared for Fedora Linux users, enabling them to install all the developments created as part of the NST project onto an already installed system. The distribution is based on Fedora 36 […]
The committee overseeing the development of the GCC compiler set (GCC Steering Committee) has approved the inclusion of a Rust language compiler implementation, prepared by the gccrs project, into the main GCC body. After integration, the standard GCC toolchain will be able to compile programs written in Rust without the need to install the rustc compiler built using LLVM technology. Developers of gccrs have been advised to start working with commands, […]
The release of the SeaMonkey 2.53.13 internet application suite has taken place, which combines a web browser, email client, news feed aggregator (RSS/Atom), and WYSIWYG HTML page editor Composer within a single product. Pre-installed add-ons include the IRC client Chatzilla, the DOM Inspector web development toolset, and the Lightning calendar-scheduler. This new release includes fixes and changes from the current Firefox codebase (SeaMonkey 2.53 is based on […]
After seven months of development, the release of the Libreboot 20220710 free boot firmware has been published. This is the fourth release of the GNU project, presented as the first stable release (previous releases were marked as test versions, as they required further stabilization and testing). Libreboot develops a fully free branch from the CoreBoot project, providing a binary-free replacement for proprietary UEFI and BIOS firmware, which are compliant with […]
The release of the rclone 1.59 utility has been published, which is an alternative to rsync, designed for copying and synchronizing data between a local system and various cloud storage services such as Google Drive, Amazon Drive, S3, Dropbox, Backblaze B2, One Drive, Swift, Hubic, Cloudfiles, Google Cloud Storage, Mail.ru Cloud, and Yandex.Disk. The project code is written in Go and is distributed under the […]
The developers of the Python Package Index (PyPI) have announced a plan to require two-factor authentication for packages categorized as critical. The importance is determined by the number of downloads, and the change will apply to the accounts of maintainers and owners of projects linked to 1% of the most downloaded packages over the past six months. Currently, the PyPI repository includes over […]
The fourth point release of the Debian 11 distribution has been published, which includes accumulated package updates and fixes for issues in the installer. The release features 81 updates addressing stability problems and 79 updates fixing vulnerabilities. Notable changes in Debian 11.4 include updates to the latest stable versions of packages such as apache2, clamav, postfix, network-manager, ganeti, libtgowt, nvidia-graphics-drivers, nvidia-persistenced, nvidia-settings, […]
The release of the cross-platform client-server backup system Bacula 13.0.0 has been announced. The 12.x branch was skipped to separate version numbering between free and commercial editions — odd numbers are used for the free version, while even numbers are used for the commercial version. The free version of Bacula is distributed under the AGPLv3 license, but excessive control over development and functionality reduction in favor of the commercial version […]
The release of the wayland-protocols package 1.26 has been published, containing a set of protocols and extensions that enhance the capabilities of the basic Wayland protocol and provide features necessary for building composite servers and user environments. All protocols go through three phases — development, testing, and stabilization. After the development stage is completed (the 'unstable' category), the protocol is moved to the 'staging' branch and officially included in the wayland-protocols set, […]
The ntop project, which develops tools for traffic capture and analysis, has published the release of the nDPI toolkit for deep packet inspection 4.4, continuing the development of the OpenDPI library. The nDPI project was established following an unsuccessful attempt to submit changes to the OpenDPI repository, which has been left unsupported. The nDPI code is written in C and is distributed under the LGPLv3 license. The system allows for identifying protocols used in traffic […]